Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rz1ySLrQ7bHNgo3spZFGDolhz0I.roa
File: Rz1ySLrQ7bHNgo3spZFGDolhz0I.roa (raw, json)
Hash identifier: U3oe3IzvF2HwyMKRYpFk02olXmCfKpluVpgzbT9CcEI=
Subject key identifier: 47:3D:72:48:BA:D0:ED:B1:CD:82:8D:EC:A5:91:46:0E:89:61:CF:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195173B150EA6DB63CE68AF71893A91E0AB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rz1ySLrQ7bHNgo3spZFGDolhz0I.roa
Signing time: Tue 18 Feb 2025 04:05:02 +0000
ROA not before: Tue 18 Feb 2025 04:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:173a:8127/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:3b:15:0e:a6:db:63:ce:68:af:71:89:3a:91:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 18 04:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=473d7248bad0edb1cd828deca591460e8961cf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:6d:f6:8b:1b:3b:59:a5:0c:69:4a:6d:1e:
54:96:20:8e:a4:4a:10:a5:f2:c1:86:25:fe:bc:c7:
42:57:29:96:a6:35:94:bd:a8:a8:3a:6c:85:9d:5d:
f9:59:d4:51:df:65:d0:d3:85:dd:f1:6d:f1:53:9f:
89:3f:f2:5a:6c:9f:b8:cd:5b:c3:d3:c5:82:ca:3b:
c5:4e:82:44:a7:d1:b2:38:27:b4:60:6f:d1:54:8d:
81:55:ce:c2:68:a6:e1:09:9f:92:35:78:c3:d7:60:
a4:29:7a:98:03:be:cc:3a:26:f6:c2:25:9d:54:3f:
3e:09:6c:e5:39:fe:23:29:8a:94:02:60:c7:e5:ee:
8b:25:0c:84:17:c6:69:d1:af:4d:b5:45:2d:96:15:
83:25:b9:0c:0b:a2:b0:b8:fa:f0:fe:a2:47:ba:2c:
08:b3:d5:82:ca:c3:05:4c:b1:4e:fa:e1:e6:68:bf:
2b:8e:63:0a:93:45:25:1e:1f:19:16:35:ab:bd:e0:
94:51:38:c9:08:18:49:75:c6:07:55:35:8d:4e:81:
b4:2f:1e:15:b7:75:94:b3:a4:83:70:9c:92:cb:d2:
2d:21:9c:e9:39:2c:54:a9:8d:c1:b1:30:f5:0d:0b:
1b:af:56:c2:04:64:30:fe:8c:3b:18:47:35:8c:b9:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:72:48:BA:D0:ED:B1:CD:82:8D:EC:A5:91:46:0E:89:61:CF:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rz1ySLrQ7bHNgo3spZFGDolhz0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:173a:8127/128
Signature Algorithm: sha256WithRSAEncryption
32:8b:9b:25:21:80:74:bc:de:55:c2:34:f3:01:62:83:18:27:
94:e5:6c:99:91:12:41:2f:1e:6b:53:2b:c5:4c:ec:34:68:9c:
d7:72:cf:30:18:09:36:bb:22:4a:98:e0:4a:f4:f9:34:84:02:
77:b1:2b:c1:5a:c9:53:42:47:53:99:63:3a:f4:dc:08:c9:5d:
73:12:07:60:98:4a:16:fd:59:d9:2b:84:72:43:2b:f5:2d:58:
d9:f8:d0:bc:f9:ce:28:9b:8d:58:bb:54:a3:17:b0:d7:2e:92:
cb:f9:a4:48:c1:55:27:6a:cb:d3:11:4c:93:c1:78:d8:0b:7b:
6e:72:ae:43:5f:19:c4:3d:74:6f:65:07:85:a9:ec:60:82:13:
70:15:b9:05:32:21:16:b8:be:61:10:e1:3f:42:f1:0c:60:85:
c7:2f:4b:fa:15:be:c4:29:4e:04:e9:d4:59:cd:ab:b2:bc:f6:
7b:81:c2:3e:b0:b4:be:8b:2e:7b:20:93:e1:0d:d3:c2:4c:74:
bb:3b:60:03:83:f4:91:62:a8:31:94:3e:c3:9b:18:e0:a8:69:
15:ec:46:83:9f:fe:40:e4:a7:bd:b9:61:38:40:45:d6:60:3c:
f0:8a:82:1e:07:93:fd:a9:6a:18:46:ef:0a:cf:98:e8:64:84:
c5:ca:ba:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:27 2025 by rpki-client